Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
File: qvSWmELenEweGldZ2Y0e1cDWLvg.mft (raw, json)
Hash identifier: a92TSImrHy0c4V69DtxQzhwAdrM5lCjeT9k0mEKNLpg=
Subject key identifier: 43:39:84:07:D5:42:A5:80:6F:95:E4:BA:80:5C:38:47:1D:65:31:78
Authority key identifier: AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
Certificate issuer: /CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Certificate serial: 019D9A3ECE24EBF76D2B074D1638346265AF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
Manifest number: 1477
Signing time: Fri 17 Apr 2026 07:01:40 +0000
Manifest this update: Fri 17 Apr 2026 07:01:40 +0000
Manifest next update: Sat 18 Apr 2026 07:01:40 +0000
Files and hashes: 1: 0EzmePks-egIiJdpcXeEPBWaiJQ.roa (hash: VNTL9T5egZkLrCiJmBLxazk1HQGTpK6/iS8WwNYTg14=)
2: 97p9ZUhGZG6kJjtKp2TuV47gh5U.roa (hash: x88qWTYqI0aG2w0GajPiY4NGO9pvbzLLCkLeMTUd2t4=)
3: AG_3AL0BiXNne_-iEtcT4CW3QFY.roa (hash: MXbxSxIompr7PTpUg8mtZo8EDK4eK9dEM10GngyQSBQ=)
4: R3GyXBYJhMHhgq5yrGVUK3jdnkA.roa (hash: g1FeF6e8PlISr+mSxj+h+WNftfc+dabb3ghrlPO9BE0=)
5: S1xGdMwCL7zcvvXwmIxBk0TUOII.roa (hash: Dt+ahUx8ad2ugzMhIwhEEjwNwt3G09wi3vOVTLugUWQ=)
6: XundD1ATPkgExkAuZ9fhY2EBgJI.roa (hash: +uqd1waFJ4ZIkhGQA2rPiPNb2R7bE9L91cSGBFAjyVM=)
7: p0lVyIeHUzTGYLAW5RWLMmU0VEI.roa (hash: RTQGUQH3DHZP7KXMTE9osS1yh94s1ux67e3vp2zT3Iw=)
8: qvSWmELenEweGldZ2Y0e1cDWLvg.crl (hash: sEkwUPiIzWo0vL6ZBsxQc69zQOSgPgq7enV2RZKTstg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 18 Apr 2026 07:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:9a:3e:ce:24:eb:f7:6d:2b:07:4d:16:38:34:62:65:af
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aaf4969842de9c4c1e1a5759d98d1ed5c0d62ef8
Validity
Not Before: Apr 17 07:01:40 2026 GMT
Not After : Apr 18 07:01:40 2026 GMT
Subject: CN=43398407d542a5806f95e4ba805c38471d653178
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:e1:ae:8c:63:6a:b5:5d:d0:bc:34:7c:c2:e3:
3c:91:f9:8b:4d:bf:fc:81:d0:1b:c6:b3:42:51:16:
2c:2d:f1:81:0d:a7:60:ab:82:a2:d9:18:ba:59:80:
e3:f5:87:de:cf:ee:74:13:1a:90:06:a3:58:c6:f9:
90:4e:18:77:ac:c5:7b:52:74:16:3d:e2:6b:22:7b:
38:26:94:7c:85:3d:81:53:a0:87:55:ef:6a:5f:d8:
5f:53:56:a0:af:ed:13:f3:4d:0f:97:98:61:ba:02:
38:52:5b:2a:95:6c:04:f5:f7:1e:2e:39:c0:8b:b6:
22:a2:e3:98:17:38:91:d9:8f:a3:8f:e7:1e:db:41:
91:a1:67:51:c4:23:37:f7:0d:82:24:75:f7:38:e7:
f5:2c:b7:3d:78:30:db:b4:56:7c:5b:9c:f0:46:7d:
77:99:94:0e:40:95:d9:1d:e6:7f:2b:16:91:12:e1:
48:b3:6e:64:34:6a:5d:57:59:da:9c:db:74:e4:95:
f2:e2:a2:3a:86:fa:62:f7:ae:4a:27:91:51:48:f0:
05:4f:40:7b:a9:bf:c5:de:61:c4:29:58:1c:6e:1d:
54:bf:18:94:51:8e:fb:40:25:ce:0a:0d:3d:0a:c5:
e1:c0:4f:5c:40:95:b4:32:fd:e8:27:98:68:80:45:
2d:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:39:84:07:D5:42:A5:80:6F:95:E4:BA:80:5C:38:47:1D:65:31:78
X509v3 Authority Key Identifier:
keyid:AA:F4:96:98:42:DE:9C:4C:1E:1A:57:59:D9:8D:1E:D5:C0:D6:2E:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/qvSWmELenEweGldZ2Y0e1cDWLvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/720f9f-f0b8-44d2-8367-f81fdf74e655/1/qvSWmELenEweGldZ2Y0e1cDWLvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:5c:9c:fc:b6:e5:17:1c:cb:4a:23:02:81:f0:f5:96:14:fe:
14:d2:56:d7:c2:17:db:60:48:56:eb:a0:6e:cb:40:0a:6f:34:
e3:d7:f2:09:75:cc:e5:c1:d7:3b:ff:8b:27:39:72:7c:4a:21:
ac:e8:e9:59:59:41:45:7d:17:a7:d6:85:7e:c1:42:a5:65:89:
0a:d3:27:e0:ab:cd:2d:75:e5:6a:ce:2b:e1:5c:03:b8:81:4e:
5f:97:a0:a7:54:79:0f:63:07:88:43:78:d8:fc:5a:a0:1f:d8:
d1:1c:6f:3d:ce:7b:1d:ef:23:21:7c:41:d7:e5:80:d7:25:fb:
dc:c2:ae:82:78:62:46:e8:ba:79:3a:45:1f:d6:a8:e2:df:82:
12:ee:55:0f:25:d0:ff:30:65:ca:0c:24:0b:ad:bb:cc:ed:15:
e3:6b:e5:f2:a3:26:7a:c4:20:0e:18:39:7b:ec:b0:95:70:39:
50:43:63:b4:0f:6e:32:2b:af:fd:d3:43:a4:4f:34:ec:94:ad:
91:2a:02:12:80:b4:94:cf:e4:dc:e6:b8:1d:bc:02:a4:c9:2b:
34:aa:7c:e3:48:45:c5:1b:ce:76:f0:59:8c:29:b0:05:8f:9e:
96:6d:fa:a6:29:06:d0:4a:50:85:47:c3:d2:91:e3:4c:f4:f2:
2b:18:36:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 17 16:19:09 2026 by rpki-client